Difference between revisions of "Query Meta Data"
From Observer GigaFlow Support | VIAVI Solutions Inc.
Kevin Wilkie (Talk | contribs) (Created page with "Table Query select (cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::bigint as avalue, count(*) as acount from netflow WHERECLAUSE group by avalue ORDERBY LIMITRO...") |
Kevin Wilkie (Talk | contribs) |
||
Line 3: | Line 3: | ||
Graph Query | Graph Query | ||
− | select FIRSTSEEN as afirstseen,appid ,avg(cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::int as aavg from netflow WHERECLAUSE and (meta::json->>'netscalerSmoothedRoundTripTime' )is not null group by afirstseen,appid | + | select FIRSTSEEN as afirstseen,appid ,avg(cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::int as aavg from netflow WHERECLAUSE and (meta::json->>'netscalerSmoothedRoundTripTime' )is not null group by afirstseen,appid order by appid,afirstseen |
+ | |||
<gallery> | <gallery> | ||
File:Metaquery.png|Report Query | File:Metaquery.png|Report Query | ||
</gallery> | </gallery> | ||
− |
Revision as of 12:07, 14 April 2022
Table Query
select (cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::bigint as avalue, count(*) as acount from netflow WHERECLAUSE group by avalue ORDERBY LIMITROW
Graph Query
select FIRSTSEEN as afirstseen,appid ,avg(cast(meta::json->>'netscalerSmoothedRoundTripTime' as int))::int as aavg from netflow WHERECLAUSE and (meta::json->>'netscalerSmoothedRoundTripTime' )is not null group by afirstseen,appid order by appid,afirstseen